[UNTESTED] patched SQL injection

 in lib/checkLogin.php